Towards a standard for bearer token URLs – Neil Madden

In XSS doesn't have to be Game Over, and earlier when discussing Can you ever (safely) include credentials in a URL?, I raised the possibility of standardising a new URL scheme that safely allows encoding a bearer token into a URL. This makes it more convenient to use lots of very fine-grained tokens rather than one…

How To Configure Identity Management, PDF, Red Hat

Episode 427: Sven Schleier and Jeroen Willemsen on Mobile Application Security : Software Engineering Radio

How to Standardize Cryptography in the Enterprise with HashiCorp Vault

Moving away from UUIDs – Neil Madden

Security Patterns in Practice: Designing Secure Architectures Using Software Patterns (Wiley Software Patterns Series) 1, Fernandez-Buglioni, Eduardo, eBook

Courses for APIs: API Expert - Skillsoft

Jason yammer api

Authorization in Software on Apple Podcasts

20 Best API Design Books of All Time - BookAuthority

Macaroon access tokens for OAuth: Part 2 – transactional auth – Neil Madden

Banking Crisis Raises Concerns About Hidden Leverage in the System - BNN Bloomberg

Federation